Daniel Oates-Lee

Conf42: DevSecOps 2023

Git those secrets out your repos!

Why having secrets, passwords and certificates in your codebase is a bad idea (even if they’re private), and how can we detect and handle these secrets we find? With our lessons learnt while helping clients manage the detection at scale and how to implement automatic checks.